会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 1. 发明授权
    • Proactive worm containment (PWC) for enterprise networks
    • 企业网络的主动式遏制(PWC)
    • US08904535B2
    • 2014-12-02
    • US11961062
    • 2007-12-20
    • Peng LiuYoon-Chan JhiLunquan Li
    • Peng LiuYoon-Chan JhiLunquan Li
    • G06F11/00G06F12/14G06F12/16G08B23/00H04L29/06
    • H04L63/145H04L63/10H04L63/1408H04L63/1491
    • A proactive worm containment (PWC) solution for enterprises uses a sustained faster-than-normal outgoing connection rate to determine if a host is infected. Two novel white detection techniques are used to reduce false positives, including a vulnerability time window lemma to avoid false initial containment, and a relaxation analysis to uncontain (or unblock) those mistakenly contained (or blocked) hosts, if there are any. The system integrates seamlessly with existing signature-based or filter-based worm scan filtering solutions. Nevertheless, the invention is signature free and does not rely on worm signatures. Nor is it protocol specific, as the approach performs containment consistently over a large range of worm scan rates. It is not sensitive to worm scan rate and, being a network-level approach deployed on a host, the system requires no changes to the host's OS, applications, or hardware.
    • 企业的主动式蠕虫病毒(PWC)解决方案使用持续的比正常速度更快的传出连接速率来确定主机是否被感染。 使用两种新颖的白色检测技术来减少误报,包括一个漏洞时间窗口引理,以避免虚假的初始遏制,以及放松分析以解除(或解除阻塞)那些被错误地包含(或阻止)的主机,如果有的话。 该系统与现有的基于签名或基于过滤器的蠕虫扫描过滤解决方案无缝集成。 然而,本发明是免签名的,不依赖于蠕虫特征。 该方法也不具体,因为该方法在大范围的蠕虫扫描速率下始终保持一致。 它对蠕虫扫描速率不敏感,作为在主机上部署的网络级方法,系统不需要更改主机的操作系统,应用程序或硬件。
    • 2. 发明申请
    • PROACTIVE WORM CONTAINMENT (PWC) FOR ENTERPRISE NETWORKS
    • 企业网络的主动式WORM CONCINMENT(PWC)
    • US20090031423A1
    • 2009-01-29
    • US11961062
    • 2007-12-20
    • Peng LiuYoon-Chan JhiLunquan Li
    • Peng LiuYoon-Chan JhiLunquan Li
    • G06F21/00
    • H04L63/145H04L63/10H04L63/1408H04L63/1491
    • A proactive worm containment (PWC) solution for enterprises uses a sustained faster-than-normal outgoing connection rate to determine if a host is infected. Two novel white detection techniques are used to reduce false positives, including a vulnerability time window lemma to avoid false initial containment, and a relaxation analysis to uncontain (or unblock) those mistakenly contained (or blocked) hosts, if there are any. The system integrates seamlessly with existing signature-based or filter-based worm scan filtering solutions. Nevertheless, the invention is signature free and does not rely on worm signatures. Nor is it protocol specific, as the approach performs containment consistently over a large range of worm scan rates. It is not sensitive to worm scan rate and, being a network-level approach deployed on a host, the system requires no changes to the host's OS, applications, or hardware.
    • 企业的主动式蠕虫病毒(PWC)解决方案使用持续的比正常速度更快的传出连接速率来确定主机是否被感染。 使用两种新颖的白色检测技术来减少误报,包括漏洞时间窗口引理,以避免错误的初始容纳,以及松弛分析,以解除(或解除阻塞)那些被错误地包含(或阻止)的主机,如果有的话。 该系统与现有的基于签名或基于过滤器的蠕虫扫描过滤解决方案无缝集成。 然而,本发明是免签名的,不依赖于蠕虫特征。 该方法也不具体,因为该方法在大范围的蠕虫扫描速率下始终保持一致。 它对蠕虫扫描速率不敏感,作为在主机上部署的网络级方法,系统不需要更改主机的操作系统,应用程序或硬件。